
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAAF2/8226AB72F71E11EAB6994123C4F9AE02/saGMIGd1j-jJIZgeixH6MI5iaTs.mft
File: saGMIGd1j-jJIZgeixH6MI5iaTs.mft (raw, json)
Hash identifier: SA4G8B+0wMOfYmk3gNSJBnJo/wnknw/vllBMpDnWX9w=
Subject key identifier: 5E:A7:8A:06:F7:3D:94:9C:30:DA:F3:80:B8:53:8C:F0:A9:0F:9F:F8
Authority key identifier: B1:A1:8C:20:67:75:8F:E8:C9:21:98:1E:8B:11:FA:30:8E:62:69:3B
Certificate issuer: /CN=A91AAAF2/serialNumber=B1A18C2067758FE8C921981E8B11FA308E62693B
Certificate serial: 086D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/saGMIGd1j-jJIZgeixH6MI5iaTs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AAAF2/8226AB72F71E11EAB6994123C4F9AE02/saGMIGd1j-jJIZgeixH6MI5iaTs.mft
Manifest number: 0864
Signing time: Sat 04 Apr 2026 20:30:04 +0000
Manifest this update: Sat 04 Apr 2026 20:30:03 +0000
Manifest next update: Sat 11 Apr 2026 20:30:03 +0000
Files and hashes: 1: saGMIGd1j-jJIZgeixH6MI5iaTs.crl (hash: kDWLwazflYOvBAOc0Pg5D2JcSdZa9IIt3T9ZoyRyZWQ=)
2: 73D3A6E0F72011EA8776EC28C4F9AE02.roa (hash: 77hSYKp5nGJ1Gv+W5zbAX2pAyRbbfZvgk88uHWf8l8M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AAAF2/8226AB72F71E11EAB6994123C4F9AE02/saGMIGd1j-jJIZgeixH6MI5iaTs.crl
rsync://rpki.apnic.net/member_repository/A91AAAF2/8226AB72F71E11EAB6994123C4F9AE02/saGMIGd1j-jJIZgeixH6MI5iaTs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/saGMIGd1j-jJIZgeixH6MI5iaTs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 20:30:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2157 (0x86d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AAAF2, serialNumber=B1A18C2067758FE8C921981E8B11FA308E62693B
Validity
Not Before: Apr 4 20:30:03 2026 GMT
Not After : Apr 11 20:30:03 2026 GMT
Subject: CN=69d174cc-1f6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:d3:f9:3a:dd:fe:ac:03:0b:c0:6d:dc:32:29:
49:2f:8b:97:8b:25:11:17:44:33:82:e1:ea:06:4f:
ab:c1:da:4e:82:fd:6f:3a:8d:ee:fc:21:e2:04:37:
a1:b5:75:3c:9f:cd:71:ae:1c:3c:e1:86:fd:ae:30:
0a:28:d1:5c:e4:5f:8a:57:d5:ad:eb:48:19:9c:77:
b4:06:fe:43:e7:36:25:68:1e:6d:29:fe:8b:a9:eb:
37:0c:a7:44:00:22:ab:9c:5f:72:e0:66:a6:be:5a:
36:c2:28:c1:a8:b3:c0:75:55:a3:0e:25:88:15:f9:
b4:3d:0b:de:67:66:56:69:c7:25:de:c9:30:ff:10:
10:b6:82:4b:c7:41:2f:f1:31:a1:b2:a3:77:be:f9:
17:3a:92:84:12:9b:7a:a6:ac:ec:7b:2f:21:d0:3f:
84:d4:4c:f4:b7:57:5c:70:a4:9e:73:cc:a9:a3:41:
cf:cf:91:79:da:05:94:65:76:df:eb:20:01:85:17:
63:7f:04:53:8b:a5:31:55:c3:86:2e:5d:c2:bf:d4:
32:4b:20:50:c8:6d:06:b5:a2:e9:f1:76:44:0d:0c:
60:17:5c:71:0e:09:4b:e6:86:ae:28:7f:c5:c5:15:
be:ea:78:07:fa:d6:96:9a:ee:fc:2a:0f:e3:f1:29:
44:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:A7:8A:06:F7:3D:94:9C:30:DA:F3:80:B8:53:8C:F0:A9:0F:9F:F8
X509v3 Authority Key Identifier:
keyid:B1:A1:8C:20:67:75:8F:E8:C9:21:98:1E:8B:11:FA:30:8E:62:69:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AAAF2/8226AB72F71E11EAB6994123C4F9AE02/saGMIGd1j-jJIZgeixH6MI5iaTs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/saGMIGd1j-jJIZgeixH6MI5iaTs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAAF2/8226AB72F71E11EAB6994123C4F9AE02/saGMIGd1j-jJIZgeixH6MI5iaTs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
33:51:75:04:45:c8:5a:11:b1:21:62:2b:85:1d:02:ce:1b:f8:
69:39:c7:17:97:26:65:e0:5d:a3:34:29:76:1d:ec:b3:23:5a:
5c:36:55:d1:c5:01:54:07:68:0c:e5:a7:d9:b0:f1:87:d7:88:
10:4d:81:4f:68:00:3d:36:18:c0:d9:68:b1:f1:84:71:07:cd:
1b:ce:7b:a2:32:84:84:29:1f:dd:46:8d:9e:8f:76:cb:17:5e:
12:db:78:40:e6:13:15:14:65:61:04:26:3c:93:2f:97:e5:1d:
eb:95:51:48:fa:20:0f:b5:00:3d:81:2a:ac:c2:8c:58:65:a5:
2e:83:c9:7e:73:e8:b6:cc:d1:03:0b:b7:db:60:8a:2e:1b:82:
c6:c5:83:e3:8d:e0:31:e5:e3:77:db:55:3a:cf:c8:b9:30:0a:
b2:bf:a2:5d:c5:c1:73:ed:e2:8d:d1:ed:88:ca:59:51:da:00:
4a:d4:81:e4:4a:8b:04:ba:eb:3f:7a:93:67:dc:90:ab:0d:0f:
e6:ab:12:27:32:94:10:fe:fc:fd:4d:4d:2a:46:f3:a3:70:5e:
5c:a1:9f:6d:8b:f2:13:dd:d7:ec:79:c1:cf:0d:8e:5a:c8:db:
ce:96:a4:15:69:dc:20:ff:4e:17:24:c2:21:51:d2:89:b3:3c:
f0:2d:4c:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:51:33 2026 by rpki-client